Oracle Coherence vulnerabilities
129 known vulnerabilities affecting oracle/coherence.
Total CVEs
129
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL73HIGH34MEDIUM20LOW2
Vulnerabilities
Page 7 of 7
CVE-2020-2949P4MEDIUMCVSS 5.3v3.7.1.0v12.1.3.0.0+2 more2020-04-15
CVE-2020-2949 [MEDIUM] CVE-2020-2949: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, Cache
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this
nvd
CVE-2018-20301P4MEDIUM≥ 0, < 0.5.22022-02-10
CVE-2018-20301 [MEDIUM] CWE-20 Permissive parameters and privilege escalation
Permissive parameters and privilege escalation
An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints (e.g., creating, editing, updating) allow users to update any coherence_fields data. For example, users can automatically confirm their accounts by sending the confirmed_at parameter with their registration request.
ghsaosv
CVE-2026-60265P4MEDIUMCVSS 6.0v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60265 [MEDIUM] CWE-284 CVE-2026-60265: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. While
nvd
CVE-2026-60307P4MEDIUMCVSS 4.3v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60307 [MEDIUM] CWE-200 CVE-2026-60307: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability c
nvd
CVE-2026-83416P4MEDIUMCVSS 4.3v12.2.1.4.0v14.1.1.0.0+2 more2026-09-15
CVE-2026-83416 [MEDIUM] CWE-400 CVE-2026-83416: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability c
nvd
CVE-2026-60303P4MEDIUMCVSS 4.3v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60303 [MEDIUM] CWE-400 CVE-2026-60303: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability c
nvd
CVE-2026-60233P4MEDIUMCVSS 4.3v15.1.1.0.02026-07-21
CVE-2026-60233 [MEDIUM] CWE-400 CVE-2026-60233: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The s
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cau
nvd
CVE-2026-83414P4LOWCVSS 2.5v15.1.1.0.02026-09-15
CVE-2026-83414 [LOW] CWE-200 CVE-2026-83414: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The s
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can r
nvd
CVE-2026-83413P4LOWCVSS 1.9v12.2.1.4.0v14.1.1.0.0+2 more2026-09-15
CVE-2026-83413 [LOW] CWE-284 CVE-2026-83413: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Succes
nvd
← Previous7 / 7